
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json)
Hash identifier: GCvyE99jvUQMs3RQaQMOejxT/KNwhRil22M7gYzb3bc=
Subject key identifier: 84:1C:9B:B7:4C:FB:62:79:C6:AD:A1:2F:7B:2D:A6:A2:C0:67:DF:32
Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
Manifest number: 9B
Signing time: Tue 03 Mar 2026 07:01:29 +0000
Manifest this update: Tue 03 Mar 2026 07:01:29 +0000
Manifest next update: Tue 10 Mar 2026 07:01:29 +0000
Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: abEqaNBanhoL//EmvWDaefUmcpgKj2jC9AQNo1mDMUA=)
2: F563CE94E3DB11F0B70B396D576F56BC.roa (hash: 3H3far6TRs8sjzmCOZTOxwcy+RqKtlZ38lP4KPbvvIg=)
3: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: srVyU53/knaGoLFgZUhr91Ugz+ECo7CZ9ZHflYwFi94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Validity
Not Before: Mar 3 07:01:29 2026 GMT
Not After : Mar 10 07:01:29 2026 GMT
Subject: CN=69a68749-b6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:23:66:bb:b5:7b:7d:da:63:5e:6b:ac:1b:
75:a6:8d:05:8b:ee:d5:6a:ab:86:fa:d9:8b:00:bf:
d0:9b:19:6a:f6:92:a2:c8:d3:7c:73:43:de:16:c3:
43:bb:b2:ab:f7:5e:79:14:4d:77:68:ca:49:69:cb:
18:69:09:7e:b3:4b:b4:80:fa:87:57:7a:d0:28:b6:
d5:4e:12:dd:64:d1:17:8d:7c:2a:8d:6e:6f:0b:06:
58:0f:ab:93:6d:54:0a:92:db:aa:3c:08:b6:a8:d6:
b4:61:6f:73:0b:32:d7:5a:4d:03:60:65:e9:90:91:
36:e8:b5:f0:61:b2:fd:1d:9e:ed:da:eb:3c:e9:a1:
3e:01:99:93:6f:ca:1b:70:f6:6b:ce:8f:8b:c8:49:
ae:c1:84:ff:26:47:bd:22:05:5e:8c:24:49:d8:18:
38:95:cf:c0:23:ef:ee:b8:2b:c0:7d:c1:46:37:fa:
23:f1:5b:b6:51:0d:32:c9:24:19:fa:2e:73:8b:44:
94:99:40:a9:f3:31:36:ff:c7:b5:12:a5:53:f5:93:
a2:2f:13:d1:a4:19:8f:c3:1f:9e:87:ac:57:80:14:
12:17:b7:17:a2:1d:bf:a7:4e:c9:f5:e4:db:0e:e0:
37:78:06:9e:ae:1d:73:a3:79:35:e7:b5:97:6a:aa:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1C:9B:B7:4C:FB:62:79:C6:AD:A1:2F:7B:2D:A6:A2:C0:67:DF:32
X509v3 Authority Key Identifier:
keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:b7:31:25:1a:c7:91:5c:ac:3d:6d:ad:76:2b:83:97:a3:b0:
36:ee:fc:e8:a9:51:06:90:68:22:77:2f:53:5c:74:0f:0d:03:
1c:be:e8:66:28:8a:4f:28:b1:0f:af:fd:24:75:52:cf:a6:8f:
8b:bd:ae:79:ab:b6:dc:fb:0a:eb:e4:45:ce:59:cd:18:69:1d:
24:8c:3f:3a:a8:38:26:43:61:db:35:b3:59:64:c5:ee:8f:2a:
27:75:14:58:e1:fe:90:fe:1d:fb:44:22:6b:70:e4:a2:1b:15:
af:7a:bf:17:36:23:58:34:ea:d2:2b:85:19:e1:40:2d:3a:46:
19:5e:41:34:9f:b4:7e:f1:71:8a:1a:cf:69:96:a6:b9:57:41:
2d:12:82:84:4c:7f:5c:75:8c:f3:ac:a0:18:d1:df:e4:ed:d1:
7b:4e:5b:21:ee:a2:c9:99:7a:75:59:5d:4c:49:ad:16:de:4c:
07:f4:53:3e:35:9b:26:b7:22:79:44:87:06:87:da:7c:cc:fa:
a1:b4:24:f9:b7:6e:5b:f2:c8:79:59:7a:58:2f:1d:48:37:05:
b7:d9:3f:45:c8:63:24:5f:7b:2b:a8:2c:03:90:af:e6:54:68:
dd:7a:c0:0a:f4:8a:8e:bb:1f:a5:57:c9:02:a9:7d:4e:c8:66:
bb:8a:15:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNCQjAxMTAvBgNVBAUTKDQ1QjE4RTIwOUVDRkREQTVDRUQ3OENGOUQ5ODEwRDYx
MUU2RDQxMjQwHhcNMjYwMzAzMDcwMTI5WhcNMjYwMzEwMDcwMTI5WjAYMRYwFAYD
VQQDEw02OWE2ODc0OS1iNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj50jZru1e33aY15rrBt1po0Fi+7VaquG+tmLAL/Qmxlq9pKiyNN8c0PeFsND
u7Kr9155FE13aMpJacsYaQl+s0u0gPqHV3rQKLbVThLdZNEXjXwqjW5vCwZYD6uT
bVQKktuqPAi2qNa0YW9zCzLXWk0DYGXpkJE26LXwYbL9HZ7t2us86aE+AZmTb8ob
cPZrzo+LyEmuwYT/Jke9IgVejCRJ2Bg4lc/AI+/uuCvAfcFGN/oj8Vu2UQ0yySQZ
+i5zi0SUmUCp8zE2/8e1EqVT9ZOiLxPRpBmPwx+eh6xXgBQSF7cXoh2/p07J9eTb
DuA3eAaerh1zo3k157WXaqolTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQcm7dM
+2J5xq2hL3stpqLAZ98yMB8GA1UdIwQYMBaAFEWxjiCez92lzteM+dmBDWEebUEk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JCMC85RkZEQUI3NjMy
M0ExMUYwQkY5RTFEMzZDNEY5QUUwMi9SYkdPSUo3UDNhWE8xNHo1MllFTllSNXRR
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0JCMC85RkZEQUI3NjMyM0ExMUYwQkY5RTFEMzZDNEY5QUUwMi9SYkdPSUo3UDNh
WE8xNHo1MllFTllSNXRRU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY7cxJRrHkVysPW2tdiuDl6OwNu786KlRBpBoIncvU1x0Dw0DHL7oZiiKTyix
D6/9JHVSz6aPi72ueau23PsK6+RFzlnNGGkdJIw/Oqg4JkNh2zWzWWTF7o8qJ3UU
WOH+kP4d+0Qia3DkohsVr3q/FzYjWDTq0iuFGeFALTpGGV5BNJ+0fvFxihrPaZam
uVdBLRKChEx/XHWM86ygGNHf5O3Re05bIe6iyZl6dVldTEmtFt5MB/RTPjWbJrci
eUSHBofafMz6obQk+bduW/LIeVl6WC8dSDcFt9k/RchjJF97K6gsA5Cv5lRo3XrA
CvSKjrsfpVfJAql9Tshmu4oVaw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:51 2026 by rpki-client